Behavioral task
behavioral1
Sample
39926a5960c56660fb83710d6caaafa0_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
39926a5960c56660fb83710d6caaafa0_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
39926a5960c56660fb83710d6caaafa0_NeikiAnalytics.exe
-
Size
282KB
-
MD5
39926a5960c56660fb83710d6caaafa0
-
SHA1
eaa3b0ac011916df33f2f8cb8aee5afe382632f0
-
SHA256
53e04dd826994ae4ce4066b42c25ee9551cdfedb23e05d0ee08d6ca61b3dde7c
-
SHA512
97b9cad10eb19b4228fda1308c025fbf9ffd7930015c9607534d19610baa47e7721410bb74c240397f7e4898c6d1840fa185d4d5c936223323dd5f01e52b420a
-
SSDEEP
6144:1LCj4mVF0imsl6POfE1JPZNBlwkDF5N+oS4CJM:1LquiZyBZN1J5N+oSO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 39926a5960c56660fb83710d6caaafa0_NeikiAnalytics.exe
Files
-
39926a5960c56660fb83710d6caaafa0_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 256KB - Virtual size: 260KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE